Their conclusion that because it doesn't steal money it can't belong to cybercriminals is bogus and show how little they understand of the industry.

I've heard of researchers from one company dumpster diving the competition. A worm (as amateur as a 20mb one ) could easily be the work of those kind. But i think it gets less press than "evil country" "omg world cyber war" ...not that it may not be happening anyway.